IBM Cloud Docs
CM-6 (1) - Automated Management, Application, and Verification

CM-6 (1) - Automated Management, Application, and Verification

Control requirements

CM-6 (1) - 0

Manage, apply, and verify configuration settings for [Assignment: organization-defined system components] using [Assignment: organization-defined automated mechanisms].

NIST supplemental guidance

Automated tools (e.g., hardening tools, baseline configuration tools) can improve the accuracy, consistency, and availability of configuration settings information. Automation can also provide data aggregation and data correlation capabilities, alerting mechanisms, and dashboards to support risk-based decision-making within the organization.